101 Question #2: Real Exam Question with Answer & Explanation

Question

Options

• AA SNAT for all addresses could be defined, and then disable the SNAT processing for select
• BThe decision to perform source address translation is always based on VLAN. Thus, the goal
• CFor each virtual server, regardless their default load balancing pools, association with SNAT
• DThe decision to perform source address translation is always based on a client's address (or

Explanation

On F5 BIG-IP, SNAT applicability can be controlled at the virtual server level, allowing administrators to enable SNAT globally and then selectively disable it on specific virtual servers tied to particular pools.

Common mistakes.

• B. SNAT processing is not restricted exclusively to VLAN-based decisions; it can be controlled at the virtual server level, so this goal is achievable and the statement is incorrect.
• C. This option is incomplete and misleadingly implies virtual server-to-SNAT association is independent of pool assignment; the correct approach is a global SNAT with selective per-virtual-server disabling, not an unqualified per-virtual-server association.
• D. SNAT decisions are not always based solely on client address or range; BIG-IP supports virtual-server-level SNAT control, making pool-based determination possible.

Concept tested. F5 BIG-IP SNAT selective application per virtual server

Reference. https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-local-traffic-management-basics/snat.html

No community discussion yet for this question.